Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/5RASKfAayD47RtgHauKE2dbsbZw.roa
File: 5RASKfAayD47RtgHauKE2dbsbZw.roa (raw, json)
Hash identifier: dFXIw9Bclxu4vEPSh6+8/gU0WSuGyHFjrlBEBPAahKo=
Subject key identifier: E5:10:12:29:F0:1A:C8:3E:3B:46:D8:07:6A:E2:84:D9:D6:EC:6D:9C
Certificate issuer: /CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Certificate serial: 05128484
Authority key identifier: 65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/5RASKfAayD47RtgHauKE2dbsbZw.roa
Signing time: Sat 01 Jan 2022 15:56:03 +0000
ROA not before: Sat 01 Jan 2022 15:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213097
IP address blocks: 2a0a:d880:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85099652 (0x5128484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Validity
Not Before: Jan 1 15:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5101229f01ac83e3b46d8076ae284d9d6ec6d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:d8:45:02:39:5d:ee:a3:09:c3:a6:94:53:
71:23:68:57:fd:e3:38:7b:18:7b:6b:e5:f9:be:de:
28:f7:aa:3f:66:51:34:49:c4:dd:77:cc:39:81:90:
ee:b8:1f:39:2a:f5:9d:29:fe:e2:07:22:78:44:fa:
f3:35:44:5d:47:5c:ec:cd:38:1a:e9:19:05:b6:3c:
81:66:b2:84:83:d0:f4:4d:d8:a3:6e:5e:e2:6f:67:
16:17:b2:70:3d:f5:a3:7a:f6:67:03:8f:69:9c:4e:
8b:1d:45:94:30:a7:5f:c0:4c:cd:48:22:88:36:63:
eb:5a:6b:e2:8a:ec:c7:dd:00:5f:25:3c:99:07:6f:
60:01:7c:97:3f:41:40:24:63:f5:21:d8:44:c8:f0:
b2:3a:d2:07:b0:65:18:c9:90:3c:11:16:ae:36:d2:
1c:8e:b5:ed:3d:77:14:b2:d2:39:7f:54:c5:35:34:
38:6c:5b:55:ae:9b:99:72:11:3a:8d:57:ab:43:30:
37:9e:bd:ba:07:f5:7e:61:16:bc:4d:cc:2e:e5:ca:
d2:c8:b4:ba:8c:cf:32:56:a2:01:ad:5c:3f:17:aa:
3a:22:11:2b:7b:8f:10:06:57:b1:90:7c:34:c2:33:
8c:ee:3c:0f:70:29:cb:ce:f3:0d:6a:c2:4e:b3:b6:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:12:29:F0:1A:C8:3E:3B:46:D8:07:6A:E2:84:D9:D6:EC:6D:9C
X509v3 Authority Key Identifier:
keyid:65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/5RASKfAayD47RtgHauKE2dbsbZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ZQxZLbH9_ItOag57p1ZGhjc6a18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d880:100::/48
Signature Algorithm: sha256WithRSAEncryption
24:c5:bb:2d:72:8e:12:6b:8c:20:44:13:0f:56:24:7f:75:c2:
b0:b1:7e:8c:67:72:c7:92:94:3e:ce:d2:e6:e3:05:12:4e:4c:
02:df:4e:8e:b2:c0:2e:95:f5:2b:dd:6a:78:45:87:34:40:df:
e5:bd:2a:5f:a3:be:45:f6:98:be:6e:1c:be:24:ce:5d:b5:53:
e2:90:6d:f6:8d:6a:9e:5d:b2:52:8e:36:3e:29:98:17:0b:97:
dc:ea:1f:e0:ac:ff:5a:52:f2:08:b7:29:46:1a:78:cb:0d:44:
de:97:31:6c:0d:05:70:8a:59:4c:3e:6a:48:90:a4:d3:93:91:
76:12:36:b1:4e:fc:99:e0:28:17:39:fe:a4:c8:77:2f:c1:fb:
55:22:48:fd:b1:e1:43:b4:d2:26:fb:1a:a4:ff:b5:7c:98:43:
d9:d7:53:dc:ff:0c:d7:44:4f:54:c2:64:2d:dd:e7:dd:d6:0a:
cb:a7:e2:06:12:8e:5a:26:90:0a:7b:5b:05:23:31:51:81:bb:
bc:6b:1c:aa:28:0e:3e:8e:d5:84:28:47:ca:14:3b:e8:c9:7e:
1e:d5:6a:ce:cb:49:fc:9f:bd:e7:93:9f:35:02:59:ec:c7:b5:
4e:89:ab:24:a1:0f:f8:80:b5:00:d7:fd:fe:96:9a:fe:23:52:
c3:d2:ca:e6
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBRKEhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTBjNTkyZGIxZmRmYzhiNGU2YTBlN2JhNzU2NDY4NjM3M2E2YjVmMB4XDTIyMDEw
MTE1NTYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTUxMDEyMjlmMDFh
YzgzZTNiNDZkODA3NmFlMjg0ZDlkNmVjNmQ5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN7V2EUCOV3uownDppRTcSNoV/3jOHsYe2vl+b7eKPeqP2ZR
NEnE3XfMOYGQ7rgfOSr1nSn+4gcieET68zVEXUdc7M04GukZBbY8gWayhIPQ9E3Y
o25e4m9nFheycD31o3r2ZwOPaZxOix1FlDCnX8BMzUgiiDZj61pr4orsx90AXyU8
mQdvYAF8lz9BQCRj9SHYRMjwsjrSB7BlGMmQPBEWrjbSHI617T13FLLSOX9UxTU0
OGxbVa6bmXIROo1Xq0MwN569ugf1fmEWvE3MLuXK0si0uozPMlaiAa1cPxeqOiIR
K3uPEAZXsZB8NMIzjO48D3Apy87zDWrCTrO2jgUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTlEBIp8BrIPjtG2Adq4oTZ1uxtnDAfBgNVHSMEGDAWgBRlDFktsf38i05q
DnunVkaGNzprXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pReFpMYkg5X0l0T2FnNTdwMVpHaGpjNmExOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDYvMWQxYjhkLWM2N2UtNGU5ZC1iMmQ0LTRmZGZmNGQ3NGM5MC8x
LzVSQVNLZkFheUQ0N1J0Z0hhdUtFMmRic2Jady5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYv
MWQxYjhkLWM2N2UtNGU5ZC1iMmQ0LTRmZGZmNGQ3NGM5MC8xL1pReFpMYkg5X0l0
T2FnNTdwMVpHaGpjNmExOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoK2IABADANBgkqhkiG9w0BAQsF
AAOCAQEAJMW7LXKOEmuMIEQTD1Ykf3XCsLF+jGdyx5KUPs7S5uMFEk5MAt9OjrLA
LpX1K91qeEWHNEDf5b0qX6O+RfaYvm4cviTOXbVT4pBt9o1qnl2yUo42PimYFwuX
3Oof4Kz/WlLyCLcpRhp4yw1E3pcxbA0FcIpZTD5qSJCk05ORdhI2sU78meAoFzn+
pMh3L8H7VSJI/bHhQ7TSJvsapP+1fJhD2ddT3P8M10RPVMJkLd3n3dYKy6fiBhKO
WiaQCntbBSMxUYG7vGscqigOPo7VhChHyhQ76Ml+HtVqzstJ/J+955OfNQJZ7Me1
TomrJKEP+IC1ANf9/paa/iNSw9LK5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:41 2024 by rpki-client on console-fra.rpki-client.org